
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/506cd155-b53f-4146-a17c-7f1375eca24a/0/CB72F7263B766AB1059ADFBA5B9193C2C5E58530.mft
File: CB72F7263B766AB1059ADFBA5B9193C2C5E58530.mft (raw, json)
Hash identifier: YsaKx7aQFZbXycrPD7nFd47YHytmrkn7wZ/nzRrcthc=
Subject key identifier: AF:BC:D1:CE:3B:E5:C9:39:00:2B:13:4D:4F:D4:55:08:17:9A:19:3D
Authority key identifier: CB:72:F7:26:3B:76:6A:B1:05:9A:DF:BA:5B:91:93:C2:C5:E5:85:30
Certificate issuer: /CN=CB72F7263B766AB1059ADFBA5B9193C2C5E58530
Certificate serial: 394B0E4D61E6261AC04760E38F36DEC52846A9D8
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CB72F7263B766AB1059ADFBA5B9193C2C5E58530.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/506cd155-b53f-4146-a17c-7f1375eca24a/0/CB72F7263B766AB1059ADFBA5B9193C2C5E58530.mft
Manifest number: C4
Signing time: Wed 23 Sep 2026 12:57:12 +0000
Manifest this update: Wed 23 Sep 2026 12:52:12 +0000
Manifest next update: Thu 24 Sep 2026 16:46:12 +0000
Files and hashes: 1: 3130332e37392e39362e302f32342d3234203d3e203634333038.roa (hash: 9B18d/9Mq6o8AyxG94Kdqz2+xtB5eaKcmGvgMOaUWzk=)
2: CB72F7263B766AB1059ADFBA5B9193C2C5E58530.crl (hash: Kw3DTxHOKJoT+kapYzhfWTWRjwEgEvUG9wW/IQk6tZw=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/506cd155-b53f-4146-a17c-7f1375eca24a/0/CB72F7263B766AB1059ADFBA5B9193C2C5E58530.crl
rsync://rpki-rsync.idnic.net/repo/506cd155-b53f-4146-a17c-7f1375eca24a/0/CB72F7263B766AB1059ADFBA5B9193C2C5E58530.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CB72F7263B766AB1059ADFBA5B9193C2C5E58530.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 24 Sep 2026 16:41:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
39:4b:0e:4d:61:e6:26:1a:c0:47:60:e3:8f:36:de:c5:28:46:a9:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CB72F7263B766AB1059ADFBA5B9193C2C5E58530
Validity
Not Before: Sep 23 12:52:12 2026 GMT
Not After : Sep 24 16:46:12 2026 GMT
Subject: CN=AFBCD1CE3BE5C939002B134D4FD45508179A193D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:98:d1:73:f9:5f:29:cd:67:87:6a:6b:bb:1e:
cf:ac:9d:35:11:3d:2d:4f:4e:ce:69:82:7b:e7:51:
7b:14:dd:d6:6b:8f:78:ff:29:10:bb:60:f0:66:d5:
cb:75:58:94:90:9a:03:82:73:5d:0c:3a:71:b9:ca:
e9:89:a3:d3:97:b1:81:e5:d6:7c:05:8a:a5:33:24:
9a:4b:5d:76:0a:84:58:a5:f3:b3:0e:e6:ed:4f:a3:
96:3f:f1:ff:68:4c:eb:46:b9:56:6a:6b:47:40:a7:
8a:92:de:48:80:f6:06:a4:8c:ba:8b:a2:8d:0a:2d:
75:a5:95:50:f6:cc:a8:83:51:39:a7:92:e6:3a:48:
c9:85:21:10:45:8a:8c:3b:2f:04:ef:30:1a:c8:2d:
d5:c8:be:6e:27:a3:8e:4b:91:86:90:0c:6a:a9:2c:
43:68:3b:9b:2a:7c:69:e3:db:57:5c:9f:94:63:e8:
69:55:65:55:92:15:3c:d4:fc:f4:dc:be:d7:60:73:
14:70:30:69:3c:a4:ed:29:88:01:73:3b:a9:cb:00:
3b:5d:50:47:33:33:20:b2:29:5a:a9:f3:74:26:84:
34:63:bc:1e:2f:2d:b4:67:9a:48:44:48:dc:91:cf:
e3:68:62:82:a3:38:a2:95:5a:a9:bc:e5:6e:08:09:
f8:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:BC:D1:CE:3B:E5:C9:39:00:2B:13:4D:4F:D4:55:08:17:9A:19:3D
X509v3 Authority Key Identifier:
keyid:CB:72:F7:26:3B:76:6A:B1:05:9A:DF:BA:5B:91:93:C2:C5:E5:85:30
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/506cd155-b53f-4146-a17c-7f1375eca24a/0/CB72F7263B766AB1059ADFBA5B9193C2C5E58530.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CB72F7263B766AB1059ADFBA5B9193C2C5E58530.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/506cd155-b53f-4146-a17c-7f1375eca24a/0/CB72F7263B766AB1059ADFBA5B9193C2C5E58530.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:69:4e:b8:f3:ff:9f:87:56:c1:30:db:f0:d4:5a:33:cd:c6:
5a:97:68:a2:b9:23:45:1c:90:8d:24:4d:e5:b8:6a:79:1f:37:
3a:ea:ae:b3:08:c6:6a:16:ee:9a:c9:bb:bb:7d:fc:95:d4:95:
9f:1b:eb:74:5e:93:6d:7c:26:75:32:a0:5e:fc:66:76:b3:c0:
3a:e3:6d:ad:4c:5c:e0:bc:41:7c:64:02:db:35:f1:53:bd:7b:
c2:9a:0c:a6:be:95:3b:7d:4e:91:08:11:fb:84:d1:fb:66:fe:
f0:41:51:15:34:b4:69:16:62:b7:08:d7:38:e2:8e:4b:52:0e:
56:bf:b1:e5:82:2a:bf:96:c3:c7:58:de:29:84:96:ea:d8:f3:
6a:1b:7a:49:ff:f4:ac:04:2a:1e:e1:c5:51:f9:8c:0e:e7:b2:
88:e5:b2:21:2f:ba:45:be:d4:f2:b1:4d:36:c4:e9:08:e1:41:
3f:96:ca:82:09:54:bc:40:4a:5e:f4:b0:fa:d1:af:05:c0:6c:
3c:a5:1f:23:45:3d:5e:f3:df:a6:22:e8:76:20:68:9a:f4:bf:
c8:88:5c:97:b5:f1:e5:b8:c1:9d:a0:4f:ca:3a:b3:f6:15:f2:
e0:4f:2c:05:91:97:ff:c3:fa:1d:08:5d:19:38:03:0b:41:71:
b0:bd:ac:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 15:35:43 2026 by rpki-client